<a href="http://stackoverflow.com/questions/2813871/how-to-hash-a-password/2813888#2813888">This</a> question on SO (how to hash a password?) begs the question; How do I answer a question when doing so might facilitate a train wreck? Eric Lippert's non-answer "Getting password security correct is about a heck of a lot more than getting SHA512 implemented correctly." is more pertinent to the original poster than the actual answer. Should anyone answering the question have included additional caveats?